MAL-2025-159014 Malicious code in mahnud-futuaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3d6fa9c21270d1b34115c03ec9e729105856b61f0a8f1d9f67549cf911b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-apricot-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e13b73ccb7939868638c754e96a2bab2251c389df73460c35f160206b58c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117373

Malicious code in foreign-apricot-cockroach npm...

EUVD-2025-98775

Malicious code in foreigndingoz3n npm...

EUVD-2025-91817

Malicious code in foreignleoponz3n npm...

EUVD-2025-91816

Malicious code in foreignmeerkatz3n npm...

EUVD-2025-74634

Malicious code in foreigncoralgold-54 npm...

Malicious code in foreign_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bddce8c0438fdbaaa419a5852cc7a8ade79646fecf011fd47f6381ca4051c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63986

Malicious code in foreigncamelz3n npm...

MAL-2025-95872 Malicious code in peculiar_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d8ab6b9729255388e902ed2db4bd56d6b90ce37ff4938f98c9c62515064e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63985

Malicious code in foreigngrasshopperz3n npm...

Malicious code in mulyono-lapis22-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419a5ee8c5c9d209ff16cfe7281aadb2eb0eaa5d30532bb8db22036cfcc28ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54261

Malicious code in foreign-violet-whitefish npm...

EUVD-2025-50171

Malicious code in foreignmammalz3n npm...

Malicious code in foreign_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e0ad543627a59ef98b699f2fe3405d9c7066ec5e87292125330ef311578a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47597

Malicious code in foreignmandrillz3n npm...

Mysterious 'SmudgedSerpent' Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions

A never-before-seen threat activity cluster codenamed UNKSmudgedSerpent has been attributed as behind a set of cyber attacks targeting academics and foreign policy experts between June and August 2025, coinciding with heightened geopolitical tensions between Iran and Israel. "UNKSmudgedSerpent...

[SECURITY] Fedora 42 Update: rust-tikv-jemalloc-sys-0.6.1-1.fc42

Rust FFI bindings to jemalloc...

Iran-Linked MuddyWater Targets 100+ Organizations in Global Espionage Campaign

The Iranian nation-state group known as MuddyWater has been attributed to a new campaign that has leveraged a compromised email account to distribute a backdoor called Phoenix to various organizations across the Middle East and North Africa MENA region, including over 100 government entities. The...

CVE-2025-10610

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection.This issue affects Winsure: through Version dated 21.08.2025...